Static task
static1
Behavioral task
behavioral1
Sample
cd00b5de345b90b1eabe487daca4c698c3d2b2718eefde27f218d7b80e540adb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd00b5de345b90b1eabe487daca4c698c3d2b2718eefde27f218d7b80e540adb.exe
Resource
win10v2004-20220812-en
General
-
Target
cd00b5de345b90b1eabe487daca4c698c3d2b2718eefde27f218d7b80e540adb
-
Size
869KB
-
MD5
dd7fc69cc97e26ff689fd0646719cf86
-
SHA1
bfb82f9050bc46e5108654145e1936f8ada4981a
-
SHA256
cd00b5de345b90b1eabe487daca4c698c3d2b2718eefde27f218d7b80e540adb
-
SHA512
578e634ee812f98af0e69d9e79be75121b0835de51d4d952b8429951006e32c0a2adeab18ffd2617f01c145d764f0d1f88b55b4da2c8e5a390f52c7a06d7758f
-
SSDEEP
12288:VjHFtqz6mHvRP8ex2ujOYrLsWfbs6SR2J7RzGreUuB2fKdDRnBoDXd0hkXZiTEvI:VpYPZP8sfAadpB2finBkpY58C
Malware Config
Signatures
Files
-
cd00b5de345b90b1eabe487daca4c698c3d2b2718eefde27f218d7b80e540adb.exe windows x86
0535e6b09002fa4e70672cee998984a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetThreadContext
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
ReadProcessMemory
ResumeThread
SetThreadContext
SetUnhandledExceptionFilter
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
rand
signal
user32
GetSystemMetrics
wsprintfA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE